redhat openshift container platform 4.14 vulnerabilities and exploits

(subscribe to this query)

NA

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader ac...

Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.13 Redhat Openshift Container Platform 4.14

NA

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.13 Redhat Openshift Container Platform 4.14

642

VMScore

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase...

Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 8.0 Redhat Openshift Container Platform 4.5 Redhat Openshift Container Platform 4.6 Redhat Openshift Container Platform 4.4

NA

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an ...

Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

2 Github repositories

320

VMScore

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.

Linux Linux Kernel Linux Linux Kernel 5.17 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Redhat Enterprise Linux 8.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410c Firmware -

NA

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged atta...

Linux Linux Kernel Linux Linux Kernel 3.13 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

2 Github repositories

NA

A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the...

Linux Linux Kernel Fedoraproject Fedora 36 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook